chore: formalize Bessemer as an Apache-2.0 project

[Windsor Nguyễn (windsornguyen)]

Pull Request

Linear Issue

N/A - repository licensing maintenance.

Summary

What:

Formally establishes Apache-2.0 as the license for Bessemer-authored work across the Rust workspace, Node packages, new source-file headers, contribution policy, and public documentation. Inherited Buck2 and third-party files retain their original notices and grants.

Why:

Bessemer needs one clear, enterprise-oriented license for new work without falsely relicensing inherited source. The retained LICENSE-MIT records Meta's upstream grant only; it does not license Bessemer-authored additions under MIT.

Important

Lines added MUST be under +500. Use stacked diffs for larger changes. Deletions are always welcome.

Lines added: 41

Test Plan

• Installed the exact locked Node dependency graph with pnpm install --frozen-lockfile --ignore-scripts using pnpm 10.30.3.
• Ran pnpm run ci check: 13/13 tests passed; generated workflows and actions remained unchanged; workflow-security validation passed.
• Ran cargo metadata --locked --no-deps --format-version 1 and verified every first-party workspace package resolves to Apache-2.0.
• Parsed the root Node package manifest and verified its license is Apache-2.0.
• Audited explicit package licenses. The only non-Apache-only declarations are the inherited Meta superconsole crate (MIT OR Apache-2.0) and upstream Starlark VS Code client (MIT).
• Ran git diff --check.

Repro / Showcase

N/A (no visual surface changed).

Tests Added

• Unit tests
• Integration tests
• E2E tests
• N/A (no new code paths)

Documentation

• Internal (docs/):

  • STYLE.md @ 8165a8c4f2 (defined the Apache-only Dedalus source header and file-brief placement).
  • README.md, NOTICE, and CONTRIBUTING.md @ a97151d6fa, 8165a8c4f2 (documented the project and inherited-code licensing boundary).

• External (docs/):

  • docs/getting_started/what_is_bsmr.md @ a97151d6fa, 8165a8c4f2 (documented Bessemer's Apache-2.0 policy).

Reviewers

• Domain: Tsion Kergo (@tsiongk)
• Readability: annyzhou

Notes for Reviewers

Please review the ownership boundary carefully: Bessemer-authored work is Apache-2.0-only, while pre-existing Buck2 and third-party files preserve their original copyright, license, and attribution notices. This PR does not claim Dedalus ownership of inherited source and does not revoke licenses already granted by upstream authors.

Changelog

2026-07-31

Feedback received:

• Put the one-line file responsibility below the closed legal header.
• Credit Dedalus Labs, Inc. and its contributors.
• Prefer Apache-2.0-only licensing for Bessemer-authored work.

Changes made:

• Corrected the source-header template and existing Dedalus-owned TypeScript headers.
• Clarified that inherited MIT grants do not apply to Bessemer-authored additions.
• Completed repository-wide Cargo and Node manifest audits.

2026-07-30

Feedback received:

• Formalize Bessemer as an Apache-2.0 project.

Changes made:

• Standardized first-party Cargo and Node package metadata on Apache-2.0.
• Added contributor, public-documentation, and NOTICE policy language.